CVE-2006-3527

BosClassifieds Classified Ads are affected by PHP remote file inclusion via the insPath parameter in index.php, recent.php, account.php, classified.php, and search.php. The root cause is unsafely including files based on user-controlled insPath, allowing arbitrary PHP code execution. Affected ver...

CVE-2008-1224

CVE-2008-1224 is an XSS vulnerability affecting the BosClassifieds Classified Ads System 3.0, specifically in the account.php script where user-supplied input in the returnTo parameter can be used to inject arbitrary web script or HTML. The issue is described as a cross-site scripting flaw that c...